Alright, seems like a non-issue then in terms for formatting as long as I am happy with some log events having no millisecond info.
On Thu, Sep 12, 2013 at 3:56 PM, David Lang <[email protected]> wrote: > On Thu, 12 Sep 2013, Xuri Nagarin wrote: > > Hi David, >> >> The logs are from different sources. >> 1. If the source did not provide millisecond information, shouldn't >> rsyslog >> put in "000000" there to keep the format consistent? >> > > No, I don't believe that rsyslog adds trailing zeros to the timestamp, so > even with milliseconds, the length can vary > > > 2. Are both the time-stamps same in terms of compliance with any time >> format standards? Or, are they two different standards? >> > > I believe that the standard allows for both formats. > > David Lang > > >> >> On Thu, Sep 12, 2013 at 2:28 PM, David Lang <[email protected]> wrote: >> >> On Thu, 12 Sep 2013, Xuri Nagarin wrote: >>> >>> Hi, >>> >>>> >>>> In the rsyslog config, I use: >>>> $ActionFileDefaultTemplate RSYSLOG_FileFormat >>>> >>>> I noticed that some logs are written with a timestamp that does not >>>> contain >>>> millisecond information. Example: >>>> 2013-09-12T18:34:00+00:00 >>>> >>>> Other events are written with millisecond information on the same >>>> instance >>>> of rsyslog: >>>> 2013-08-30T10:09:52.819709+00:****00 >>>> >>>> >>>> What could be causing this difference? >>>> >>>> >>> are the logs with the different timestamps originating from different >>> servers? if so, it's probably a matter of the other servers not providing >>> the millisecond information. >>> >>> If the logs are all from the same machine, are the different logs from >>> different applications? >>> >>> David Lang >>> ______________________________****_________________ >>> rsyslog mailing list >>> http://lists.adiscon.net/****mailman/listinfo/rsyslog<http://lists.adiscon.net/**mailman/listinfo/rsyslog> >>> <http:**//lists.adiscon.net/mailman/**listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog> >>> > >>> http://www.rsyslog.com/****professional-services/<http://www.rsyslog.com/**professional-services/> >>> <http://**www.rsyslog.com/professional-**services/<http://www.rsyslog.com/professional-services/> >>> > >>> >>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>> DON'T LIKE THAT. >>> >>> ______________________________**_________________ >> rsyslog mailing list >> http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog> >> http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/> >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> >> ______________________________**_________________ > rsyslog mailing list > http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog> > http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/> > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
